Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
File: sCS1dKJD6FPfLfBUycnwke1H8aE.mft (raw, json)
Hash identifier: um+RgK1xsWkWcwb0fKZlGVdh20PAK3vS3Ro2hIstQl0=
Subject key identifier: 32:C1:E2:B5:D8:68:0F:55:7F:25:C4:2E:98:0E:04:6C:C3:84:4A:BB
Authority key identifier: B0:24:B5:74:A2:43:E8:53:DF:2D:F0:54:C9:C9:F0:91:ED:47:F1:A1
Certificate issuer: /CN=b024b574a243e853df2df054c9c9f091ed47f1a1
Certificate serial: 01A0E3633C63B037E88CC6CFD8E67762FA4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCS1dKJD6FPfLfBUycnwke1H8aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
Manifest number: EF
Signing time: Sun 27 Sep 2026 15:02:06 +0000
Manifest this update: Sun 27 Sep 2026 15:02:06 +0000
Manifest next update: Mon 28 Sep 2026 15:02:06 +0000
Files and hashes: 1: oqX2gExMo-KlgfeVjBQNl-V9kYQ.roa (hash: AhjEc5iJ0saymH9KLRkLm0lyxGwUZpd99G/NbAW7jGw=)
2: sCS1dKJD6FPfLfBUycnwke1H8aE.crl (hash: a0P1f5CwnPoXiSEYWx9aAzhTw8UxUIbO94uxnf/COgA=)
3: wcZFZKJuAQyp04XCR7u-DhFRd3A.roa (hash: 5hph13qMNz8BJaZ5fOJ0lHqfAydPPEugNlEoJOSv5SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCS1dKJD6FPfLfBUycnwke1H8aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:63:3c:63:b0:37:e8:8c:c6:cf:d8:e6:77:62:fa:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b024b574a243e853df2df054c9c9f091ed47f1a1
Validity
Not Before: Sep 27 15:02:06 2026 GMT
Not After : Sep 28 15:02:06 2026 GMT
Subject: CN=32c1e2b5d8680f557f25c42e980e046cc3844abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a7:78:39:ec:15:5f:e2:76:a9:1a:c4:76:de:
4c:8c:b1:60:8e:2c:95:f4:ce:90:7a:99:92:57:c6:
de:80:d8:fd:21:b1:da:6c:9a:b0:04:00:d2:8f:a4:
79:e8:94:4c:f2:5d:1f:3f:c8:a1:96:f4:a5:ea:13:
cb:56:97:12:20:30:fe:39:0b:23:92:6e:e0:1d:25:
85:1c:b0:76:01:29:79:f0:09:86:6e:74:f5:da:d9:
19:00:a9:7b:3d:a4:d4:43:e5:46:86:47:99:e4:fc:
d8:a3:e9:1c:6f:af:a5:cc:7a:5a:da:a4:f0:41:db:
1c:cd:8e:55:d2:8e:d3:f5:5e:c9:f8:9b:9b:cb:8e:
72:19:20:b8:7e:3c:4e:ff:c1:4d:5e:7b:17:97:1f:
eb:4f:ab:ae:02:d4:bb:fa:ff:0c:25:23:bb:c4:3a:
80:19:61:7d:66:06:75:dc:cd:fa:11:6e:43:b0:ef:
d3:fa:f0:ba:d9:ff:0a:d3:c4:9d:e0:93:92:4b:b2:
9e:18:7b:86:e7:d7:28:e2:a5:de:da:86:a1:f3:b0:
6f:ba:14:76:9c:a1:a4:fd:be:ac:16:3f:4c:25:91:
82:cc:8d:a1:32:52:e1:f4:fd:e4:9f:9c:84:c2:35:
41:2d:98:1c:57:8e:5a:c2:7d:fd:13:9c:f3:54:90:
56:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C1:E2:B5:D8:68:0F:55:7F:25:C4:2E:98:0E:04:6C:C3:84:4A:BB
X509v3 Authority Key Identifier:
keyid:B0:24:B5:74:A2:43:E8:53:DF:2D:F0:54:C9:C9:F0:91:ED:47:F1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCS1dKJD6FPfLfBUycnwke1H8aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:da:02:cc:b6:dd:d3:31:78:48:9c:d6:ce:26:98:a7:dd:45:
78:23:20:5e:f2:e4:03:6c:5a:68:2b:f0:48:3b:b5:cf:7d:25:
2b:ce:5d:32:7b:48:7c:57:74:f7:ef:e4:57:30:a2:47:09:48:
41:98:d1:ed:48:16:b6:1b:18:66:1f:ae:8a:e4:9a:23:fa:87:
90:4c:4c:2c:5d:84:24:1b:07:df:1e:1c:2e:e4:60:0d:64:f9:
22:1e:d6:d6:85:7e:1e:e2:10:16:07:66:ee:72:f8:51:69:28:
a1:01:8f:8a:f1:c9:74:12:c6:88:09:34:1a:fc:06:83:b8:e4:
97:48:8b:8f:82:8f:c9:10:34:69:08:b3:df:31:d0:cb:fd:71:
6e:c3:60:97:0d:81:63:00:e0:4a:19:47:59:7e:61:26:9d:ca:
ab:31:3d:e1:02:ae:55:72:c4:2b:d0:68:84:b2:1a:5d:d3:61:
97:47:31:6e:32:32:c5:1b:29:27:e6:a4:d6:08:e3:d0:4a:fd:
de:3a:e1:c8:c4:8c:a3:17:b9:54:e1:8f:51:f1:53:ac:01:97:
a3:34:7a:85:af:73:60:c7:fb:20:e9:39:4b:af:ad:cb:34:5c:
8b:e4:4a:86:cc:35:a9:8e:f9:a7:5b:03:7c:48:7b:e2:18:4c:
5f:01:5c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:47:11 2026 by rpki-client